In this Twitch stream we extend our previous work on Garble Go string decryption to tackle another type of obfuscator used for GoLang that creates in-line obfuscated strings (similar to ADV) instead of using functions. The source/name of the obfuscator is currently unknown but the obfuscation pattern in the compiled binary is easy to identify.
dd124a7b396150e4d8275c473594e47ac24606ef0955e2c13310aac9045554ac
Go Stack Strings - Researching a generic solution to decrypt these stack strings
m4n0w4r
2023-12-06 08:04:48 +0000 UTC